Compare commits

...

10 Commits

Author SHA1 Message Date
openeuler-ci-bot
e923c93289
!31 update to v2.0.2
From: @gwei3 
Reviewed-by: @Rivergone 
Signed-off-by: @Rivergone
2023-06-25 07:09:22 +00:00
gwei3
c0e9debd6a update to v2.0.2 2023-06-25 14:55:05 +08:00
openeuler-ci-bot
d1db10f92f
!28 update to v2.0.1
From: @gwei3 
Reviewed-by: @Rivergone 
Signed-off-by: @Rivergone
2023-06-09 07:37:28 +00:00
gwei3
603830a566 update to v2.0.1 2023-06-09 15:17:59 +08:00
openeuler-ci-bot
5de0447caf
!22 update package version to 2.0.0
From: @leezhenxiang 
Reviewed-by: @gwei3 
Signed-off-by: @gwei3
2023-05-21 07:33:39 +00:00
waterh2o
1f1d9203f9 update package version to 2.0.0 2023-05-21 13:48:15 +08:00
openeuler-ci-bot
0006632eee
!16 fix build issue
From: @gwei3 
Reviewed-by: @Rivergone 
Signed-off-by: @Rivergone
2023-02-15 04:21:28 +00:00
gwei3
f3975c558c replace openssl deps to compat-openssl11 to build in latest Mainline
In latest Mainline openssl version was upgraded from 1.1 to 3.0, but
the google tpm simulator used by kunpengsecl still relies on openssl
1.1, so replace the deps to make the build working.

Long-term, we need consider how to evolve to latest openssl version.

Meanwhile, remove the %clean label in spec which caused double clean
2023-02-15 11:17:40 +08:00
openeuler-ci-bot
4caefb54bf
!14 update version to 1.1.2
From: @gwei3 
Reviewed-by: @wucaijun2001 
Signed-off-by: @wucaijun2001
2022-09-16 06:32:52 +00:00
gwei3
0cc3b06220 update to version 1.1.2 2022-09-16 13:03:30 +08:00
4 changed files with 102 additions and 8 deletions

Binary file not shown.

BIN
kunpengsecl-v2.0.2.tar.gz Normal file

Binary file not shown.

View File

@ -1,5 +1,5 @@
%global name kunpengsecl
%global version 1.1.1
%global version 2.0.2
%undefine _missing_build_ids_terminate_build
Name: %{name}
@ -12,22 +12,31 @@ URL: https://gitee.com/openeuler/kunpengsecl
Source0: %{name}-v%{version}.tar.gz
Source1: vendor.tar.gz
BuildRequires: gettext make golang
BuildRequires: protobuf-compiler openssl-devel
BuildRequires: protobuf-compiler compat-openssl11-devel
BuildRequires: cjson-devel
Requires: openssl
Packager: WangLi, Wucaijun
%ifarch aarch64
BuildRequires: itrustee_sdk-devel
%endif
Packager: leezhenxiang, WangLi, Wucaijun, gwei3
%description
This is %{name} project, including rac, ras and rahub packages.
This is %{name} project, including rac, ras, rahub, qcaserver, attester and tas packages.
%package rac
Summary: the rac package.
Requires: compat-openssl11-libs
%ifarch aarch64
Requires: itrustee_sdk
%endif
%description rac
This is the rac rpm package, which is used to install the client of the program.
%package ras
Summary: the ras package.
Requires: %{name}-attester
%description ras
This is the ras rpm package, which is used to install the server of the program.
@ -38,6 +47,34 @@ Summary: the rahub package.
%description rahub
This is the rahub rpm package, which is used to cascade clients.
%package qcaserver
Summary: the qcaserver package.
%description qcaserver
This is the qcaserver rpm package, which is used to invoke libqca.
%package attester
Summary: the attester package.
Requires: cjson
Requires: compat-openssl11-libs
%description attester
This is the attester rpm package, which is used to verify ta reports.
%package tas
Summary: the tas package.
Requires: %{name}-attester
%description tas
This is the tas rpm package, which is used to sign ak cert.
%package devel
Summary: the develop package.
Requires: %{name}-attester
%description devel
This is the devel rpm package, which provide supporting header file.
%prep
%setup -q -c -a 1
@ -67,6 +104,9 @@ make install DESTDIR=%{buildroot}
%{_docdir}/attestation/rac/README.md
%{_docdir}/attestation/rac/README.en.md
%{_docdir}/attestation/rac/LICENSE
%ifarch aarch64
%{_libdir}/libkta.so
%endif
%files ras
%{_bindir}/ras
@ -89,11 +129,65 @@ make install DESTDIR=%{buildroot}
%{_docdir}/attestation/rahub/README.en.md
%{_docdir}/attestation/rahub/LICENSE
%clean
rm -rf %{_builddir}
rm -rf %{buildroot}
%files qcaserver
%{_bindir}/qcaserver
%{_sysconfdir}/attestation/qcaserver/config.yaml
%{_datadir}/attestation/qcaserver/prepare-qcaconf-env.sh
%{_docdir}/attestation/qcaserver/README.md
%{_docdir}/attestation/qcaserver/README.en.md
%{_docdir}/attestation/qcaserver/LICENSE
%{_datadir}/attestation/qcaserver/libqca.so
%{_datadir}/attestation/qcaserver/libteec.so
%files attester
%{_bindir}/attester
%{_sysconfdir}/attestation/attester/config.yaml
%{_datadir}/attestation/attester/prepare-attesterconf-env.sh
%{_docdir}/attestation/attester/README.md
%{_docdir}/attestation/attester/README.en.md
%{_docdir}/attestation/attester/LICENSE
%{_libdir}/libteeverifier.so
%files tas
%{_bindir}/tas
%{_bindir}/*.pem
%{_sysconfdir}/attestation/tas/config.yaml
%{_datadir}/attestation/tas/prepare-tasconf-env.sh
%{_docdir}/attestation/tas/README.md
%{_docdir}/attestation/tas/README.en.md
%{_docdir}/attestation/tas/LICENSE
%files devel
%{_includedir}/teeverifier.h
%changelog
* Sun Jun 25 2023 gwei3 <11015100@qq.com> - 2.0.2-1
- update to 2.0.2
* Thu Mar 23 2023 leezhenxiang <1172294056@qq.com> - 2.0.1-1
- update to 2.0.1
- add devel package
* Thu Mar 23 2023 leezhenxiang <1172294056@qq.com> - 2.0.0-1
- update to 2.0.0
- add qcaserver, attester, and tas packages
- add BuildRequires itrustee_sdk-devel, cjson-devel and Requires itrustee_sdk, cjson
- modify makefile to adapt to different architectures
- specify the build requires in rac and attester package
* Fri Feb 10 2023 gwei3 <11015100@qq.com> - 1.1.2-2
- update BuildRequires & Requires to replace openssl* with compat-openssl11* to adapt to latest Mainline
- remove redundent clean label in spec file
* Thu Sep 15 2022 gwei3 <11015100@qq.com> - 1.1.2-1
- update to 1.1.2
- add slice length checks to avoid buffer overflow while extracting and verifying
- update integration test data to meet restapi parameter check requirement
- modify raagent/main.go file, change log to logger, os.Exit returns different values based on diff errors
- close RAS restapi server in signal handler
- Add parameter format checking for pcr/bios/ima in POST {id}/newbasevalue API
- Fix bugs in v1.1.1
bug 1: hostintegritytool.sh can only add the 2nd part of ima policy into /etc/ima/ima-policy.
bug 2: running hostintegritytool.sh multiple times will add duplicated linux cmdlines in /etc/default/grub.
bug 3: rahub config path was assigned wrong values, which is caused by copy/paste
- fix the issue that Makefile not sync vendor
- modify readme file
* Fri Sep 02 2022 gwei3 <11015100@qq.com> - 1.1.1-1
- update to 1.1.1
- reuse makefile to do install

Binary file not shown.